Privacy policy
Days Away for iPhone · last updated 11 September 2026
In short: your trips, travellers and documents stay on your iPhone. There is no account, no analytics, no advertising and no tracking. A few features send the minimum they need to the app's own service and the providers named below.
Who is responsible
Luxxow S.a r.l.-S, rue Treeschheck 12, L-3321 Roeser, Luxembourg. Contact: germain@delagardelle.lu.
What stays on your phone
Everything you enter: trips, dates, destinations, travellers (name, age group, nationality, optional date of birth), travel-document details (type, country, expiry; the document number is stored only as its last four characters), flights and bookings, tasks, packing lists, notes, photos you add. It is stored in the app's own database on your device and deleted when you delete the trip (kept 30 days in "Recently deleted") or choose "Delete all data on this phone".
What leaves your phone, and why
| When you | What is sent | To whom | Kept? |
|---|---|---|---|
| Look up a flight or its live status | Flight number, date, airports | The app's Cloudflare Worker, via our PoVault credential broker, then OpenAI | The Worker may cache the result by flight and date; OpenAI retention is explained below |
| Paste or share a booking confirmation | The text of the confirmation (PDFs and photos are read on your phone first; only the text is sent) | The app's Cloudflare Worker, via our PoVault credential broker, then OpenAI | The Worker does not cache the text; OpenAI retention is explained below |
| Ask for a picture of a place | The place name and climate | The app's own service, which asks OpenAI to paint it | The picture may be cached at the edge so it is painted once |
| Search a place | The text you type | Photon (OpenStreetMap), photon.komoot.io | Per Photon's policy |
| See a flight | The airline's code, to fetch its logo | The app's own service, which relays the picture from Aviasales; your phone never reaches them | Cached by airline, not by you |
| See the weather | Destination coordinates and dates | Open-Meteo | Per Open-Meteo's policy |
| Turn on iCloud backup | Your backup file | Your own iCloud Drive (Apple) | Until you turn it off or delete it |
| Buy Days Away Plus | The purchase | Apple (App Store). We never see your payment details | Per Apple's policy |
| Claim a Founding seat (launch window, first 500 Plus purchases we can verify) | The same random install identifier already used to refuse abuse | The app's Cloudflare Worker | The identifier is stored as “this install claimed a seat”, plus a count. Not linked to you or your Apple Account |
For OpenAI Responses requests, the service sets store: false, which disables the default storage of the response for later retrieval. OpenAI states that API data is not used to train its models, but may retain customer content in abuse-monitoring logs for up to 30 days by default, with legal and safety exceptions. We have not verified that this project has Zero Data Retention. PoVault keeps an operational audit record; its exact content and retention must be verified before store submission.
Requests to the app's own service carry a random install identifier so the service can tell apps apart and refuse abuse. It is not linked to you, your Apple Account or any other identifier, and it is not used for tracking. Daily rate-limit counts are deleted two days after their UTC day ends.
No data is sold. No data is used for advertising. The app contains no analytics or crash-reporting software.
Notifications, widgets and the lock screen
Reminders, the widget and the Live Activity are produced on your phone from your own trips. Their text never contains passport numbers or booking references beyond what you chose to see.
Your rights (GDPR)
Because your data is on your phone, you exercise your rights directly in the app: view and edit anything, export a redacted copy (Profile → Export my data), back up to your own iCloud, delete a trip or everything. For anything else, or to complain, write to germain@delagardelle.lu. You may also contact the Luxembourg data protection authority (CNPD).
Children
Days Away is not directed at children under 13, and we knowingly collect no data from them; travellers you add for your family are stored on your phone only.
Changes
When this policy changes, the date above changes and the new version is published at this address.